Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-t18w-rg4b-fqea
Summary
Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.
Aliases
0
alias CVE-2023-3193
1
alias GHSA-qxf6-mp24-52cv
Fixed_packages
0
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-tqvb-a46r-jbf8
10
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
1
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-rs2y-3c75-uycm
43
vulnerability VCID-s86p-ew9a-rkgt
44
vulnerability VCID-su57-hncy-5qg4
45
vulnerability VCID-sw28-urg9-tqgd
46
vulnerability VCID-tf5n-etq9-2bg1
47
vulnerability VCID-turp-jxv8-1fgy
48
vulnerability VCID-uun9-ctyg-k3d9
49
vulnerability VCID-w7z4-h1ug-z3cq
50
vulnerability VCID-wpqk-8fd9-p3ex
51
vulnerability VCID-xn1n-5rgc-83bg
52
vulnerability VCID-y1wd-arvg-2ugt
53
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
Affected_packages
0
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
1
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
2
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
3
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
4
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-9epf-zkmr-67a6
2
vulnerability VCID-t18w-rg4b-fqea
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
5
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
6
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
7
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
8
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3193
reference_id
reference_type
scores
0
value 0.00225
scoring_system epss
scoring_elements 0.45329
published_at 2026-06-05T12:55:00Z
1
value 0.00225
scoring_system epss
scoring_elements 0.45287
published_at 2026-06-08T12:55:00Z
2
value 0.00225
scoring_system epss
scoring_elements 0.45313
published_at 2026-06-07T12:55:00Z
3
value 0.00225
scoring_system epss
scoring_elements 0.45333
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3193
1
reference_url https://github.com/liferay/liferay-portal
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal
2
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-3193?p_r_p_assetEntryId=121861662&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121861662%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-3193?p_r_p_assetEntryId=121861662&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121861662%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse
3
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-3193
reference_id cve-2023-3193
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T15:42:06Z/
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-3193
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3193
reference_id CVE-2023-3193
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3193
5
reference_url https://github.com/advisories/GHSA-qxf6-mp24-52cv
reference_id GHSA-qxf6-mp24-52cv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qxf6-mp24-52cv
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-t18w-rg4b-fqea